security-compliance-checker

Extract OWASP rules from Excel files for security scans.

Updated Mar 27, 2026
One-click install
npx skills add https://github.com/minhquan2904/vibe-check-scam --skill security-compliance-checker
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-compliance-checker
Source: https://github.com/minhquan2904/vibe-check-scam/tree/main/base_knowledge/standards/base/security-compliance-checker
Command: npx skills add https://github.com/minhquan2904/vibe-check-scam --skill security-compliance-checker

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires openpyxl, and includes scripts (resource) components.

What problem does it solve?

Automates security rule extraction from user-provided Excel files and translates them into actionable checks for code security compliance in Backend and Frontend.

Core Features & Use Cases

  • Auto-detects Excel column structure to extract an OWASP checklist without fixed headers.
  • Requires mandatory user approval before applying extracted rules and generating phase-driven scan plans.
  • Performs phase-driven scans across Backend (.NET) and Frontend code, producing a consolidated security report.
  • Integrates with OpenSpec/OpenAPI workflows and established guardrails to enforce security standards.

Quick Start

Provide an Excel file containing OWASP rules and run the extractor to generate owasp_checklist.md for use in your security scan workflow.

Frequently Asked Questions about security-compliance-checker

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I extract OWASP security rules from an Excel file for automated compliance scanning?

Extracting OWASP security rules from Excel involves auto-detecting column structures to generate an actionable checklist. This Skill parses user-provided spreadsheets to produce a markdown checklist, driving automated security compliance scans without requiring fixed headers.

Can I scan both backend and frontend codebases using a custom Excel security checklist?

Yes, you can scan both backend (.NET) and frontend codebases using a custom Excel security checklist. The process performs phase-driven scans across both architectures, applying your approved rules to generate a consolidated security compliance report.

Does the security rule extractor require fixed column headers in the Excel spreadsheet?

No, the security rule extractor does not require fixed column headers in the Excel spreadsheet. It features dynamic column detection, automatically identifying and extracting the OWASP checklist structure from your provided file regardless of specific header naming.

How do I integrate Excel-based OWASP compliance checks into an OpenSpec workflow?

Integrating Excel-based OWASP compliance checks into OpenSpec workflows involves script-based execution to generate a markdown checklist. This output enforces established guardrails and security standards, requiring mandatory user approval before applying rules to phase-driven scan plans.

What is the process for approving security rules before running a phase-driven code scan?

Approving security rules before running a phase-driven code scan requires mandatory user validation. After extracting rules from Excel, the workflow enforces an approval gate where you must explicitly authorize the extracted checklist before generating and executing the scan plan.